Linux Distros Unpatched Vulnerability : CVE-2025-61152

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - python-jose thru 3.3.0 allows JWT tokens with 'alg=none' to be decoded and accepted without any cryptographic signature verification. A malicious actor can craf...

CVE-2025-61152

creationtimestamp| type| source ---|---|--- 2025-10-10 15:37:48+00:00| seen| https://gist.github.com/Darkcrai86/bf8b76cdef7e25160872f38890afe399...

CVE-2025-61152

python-jose thru 3.3.0 allows JWT tokens with 'alg=none' to be decoded and accepted without any cryptographic signature verification. A malicious actor can craft a forged token with arbitrary claims e.g., isadmin=true and bypass authentication checks, leading to privilege escalation or unauthoriz...